CVE-2024-23060

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function...

CVE-2024-23060

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function...

CVE-2024-23060

The CVE-2024-23060 entry concerns TOTOLINK A3300R with firmware V17.0.0cu.557_B20221024, where the setDmzCfg function is vulnerable to command injection via the ip parameter. The root cause, as described in CNVD/RedHat/CNNVD-type entries, is inadequate filtering of constructed command characters,...